All-in-One WP Migration says the backup exceeds the upload limit even though upload_max_filesize and other PHP settings are already very large. The reviewed report describes this on a local environment. Local hosting does not automatically remove web-server or security limits, and the report did not conclusively identify the responsible setting. Q1
Identify when rejection occurs
A file rejected at selection is a different diagnostic point from an upload that begins and later receives 413, 403 or a server error. Open the network panel before the attempt. Record whether a request starts and which response fails first.
Preserve the original archive and use a separate destination for import tests. A blocked transfer is not a reason to overwrite an active production installation. Keep the transfer investigation distinct from the later restoration process.
Find the effective boundary
- Compare display and file: Record the plugin’s stated maximum and the file’s actual byte count. Distinguish complete file size from the size of individual request segments.
- Check web PHP: Read the effective values in the PHP environment serving this website. An edited configuration file or command-line result does not prove that the web process uses those values. Upload and POST limits need to fit the intended transfer together. Q2
- Inspect the response: For server-side rejection, correlate time and status with web-server, proxy and applicable WAF logs. ModSecurity can enforce its own request-body limits, which a PHP setting change does not remove. Q3
- Use a small control transfer: A known small archive on a separate installation can test the basic route. If it succeeds, size dependence is plausible. A working small file does not establish that the larger backup is intact.
- Choose a supported route: Adjust the evidenced boundary narrowly or use a transfer/import method supported for this installation. Manually placing a file and using a paid restore feature are not automatically equivalent to a supported browser import.
Avoid unlimited-resource experiments
Extremely high memory values or unlimited request sizes are not a necessary standard remedy. Identify actual demand and the responsible component. After correction, confirm the complete transfer; only then does the separate verification of the import and restored website begin.
Document which setting changed and where it applies. A per-site correction should not silently become a server-wide relaxation affecting unrelated applications.
Frequently asked questions
Why does my php.ini edit make no difference?
Another configuration may be loaded, or rejection may occur before PHP. Check the web process and first failed response.
Are 413 and 403 the same failure?
No. They provide different leads. The exact server message and corresponding log entry determine the next action.
Can I rename the file to make it smaller?
No. A filename changes neither byte count nor request size. Changing backup contents requires a deliberate plan that preserves everything needed for restoration.
Information for assistance
Provide plugin version, file size, displayed maximum, web-PHP values and the first failed response. The backup itself is initially unnecessary for identifying this boundary.
KAN KAI WORKS can identify the import route and the size limit actually rejecting it. Get help with this case.
Prepare a findings note
Summarise your observations for your enquiry. The note is created in your browser and is not saved or sent here. You can then copy it into the contact form.
Unknown is fine. Do not enter passwords, customer data or complete confidential logs.
Support with this issue
KAN KAI WORKS can identify the import route and the size limit actually rejecting it.
Sources and scope
- Q1: Original report and visible replies
- Q2: ServMask: effective upload limits
- Q3: ModSecurity: request-size limits before the application
Sources checked: 5 November 2026. The original incident has not been independently reproduced.
